🛡️ مركز معلومات الثغرات
قاعدة بيانات الثغرات والتهديدات الأمنية المحدّثة
| المعرّف | الخطورة | CVSS | الوصف | الحالة | النشر |
|---|---|---|---|---|---|
| CVE-2026-5711 | متوسط | 6.4 |
The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block at…
|
— | أبريل 8, 2026 |
| CVE-2026-3142 | متوسط | 6.4 |
The Pinterest Site Verification plugin using Meta Tag plugin for WordPress is vulnerable to Stored Cross-Site Scripting …
|
— | أبريل 8, 2026 |
| CVE-2026-4300 | متوسط | 6.4 |
The Robo Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Loading Label' setting in al…
|
— | أبريل 8, 2026 |
| CVE-2026-3600 | متوسط | 6.4 |
The Investi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'investi-announcements-accordion' …
|
— | أبريل 8, 2026 |
| CVE-2025-14732 | متوسط | 6.4 |
The Elementor Website Builder – More Than Just a Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Sc…
|
— | أبريل 8, 2026 |
| CVE-2026-3239 | متوسط | 6.4 |
The Strong Testimonials plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's testimonial_v…
|
— | أبريل 8, 2026 |
| CVE-2026-5506 | متوسط | 6.4 |
The Wavr plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wave` shortcode in all vers…
|
— | أبريل 8, 2026 |
| CVE-2025-57851 | متوسط | 6.4 |
A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems f…
|
— | أبريل 8, 2026 |
| CVE-2026-2481 | متوسط | 6.4 |
The Beaver Builder Page Builder – Drag and Drop Website Builder plugin for WordPress is vulnerable to Stored Cross-Site …
|
— | أبريل 8, 2026 |
| CVE-2026-4785 | متوسط | 6.4 |
The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-S…
|
— | أبريل 8, 2026 |
| CVE-2026-4303 | متوسط | 6.4 |
The WP Visitor Statistics (Real Time Traffic) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the …
|
— | أبريل 8, 2026 |
| CVE-2026-3513 | متوسط | 6.4 |
The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
|
— | أبريل 8, 2026 |
| CVE-2026-4379 | متوسط | 6.4 |
The LightPress Lightbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `group` attribute in t…
|
— | أبريل 8, 2026 |
| CVE-2026-5508 | متوسط | 6.4 |
The WowPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `wowpress` shortcode in …
|
— | أبريل 8, 2026 |
| CVE-2025-57853 | متوسط | 6.4 |
A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd fi…
|
— | أبريل 8, 2026 |
| CVE-2026-4655 | متوسط | 6.4 |
The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SVG Imag…
|
— | أبريل 8, 2026 |
| CVE-2026-5451 | متوسط | 6.4 |
The Extensions for Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'elevation-trac…
|
— | أبريل 8, 2026 |
| CVE-2026-4871 | متوسط | 6.4 |
The Sports Club Management plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'before' and 'after…
|
— | أبريل 8, 2026 |
| CVE-2026-4341 | متوسط | 6.4 |
The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'follo…
|
— | أبريل 8, 2026 |
| CVE-2026-3618 | متوسط | 6.4 |
The Columns by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attr…
|
— | أبريل 8, 2026 |